CVE-2016-2173

CWE-20 — Improper Input Validation6 documents5 sources
Severity
9.8CRITICAL
EPSS
21.3%
top 4.32%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
2
Vmware Spring Advanced Message Queuing ProtocolFedoraproject Fedora
Timeline
PublishedApr 21
Latest updateMay 13

Description

org.springframework.core.serializer.DefaultDeserializer in Spring AMQP before 1.5.5 allows remote attackers to execute arbitrary code.

CVSS vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:HExploitability: 3.9 | Impact: 5.9

Affected Packages2 packages

Also affects: Fedora 22, 23, 24

Patches

Patch: lists.fedoraproject.org ↗Patch: lists.fedoraproject.org ↗Patch: lists.fedoraproject.org ↗

🔴Vulnerability Details

3
GHSA
Improper Input Validation in Spring AMQP↗2022-05-13
▶
OSV
Improper Input Validation in Spring AMQP↗2022-05-13
▶
CVEList
CVE-2016-2173: org↗2017-04-21
▶

💬Community

2
Bugzilla
CVE-2016-2173 springframework-amqp: remote code execution [fedora-all]↗2016-04-12
▶
Bugzilla
CVE-2016-2173 springframework-amqp: remote code execution↗2016-04-12
▶
CVE-2016-2173 (CRITICAL CVSS 9.8) | org.springframework.core.serializer | cvebase.io